Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/EBkWWncxgrtcR04RBW5xRAhqB_Y.roa
File: EBkWWncxgrtcR04RBW5xRAhqB_Y.roa (raw, json)
Hash identifier: +tLurhzSJO6Fa+3tLnsFn+4dlN2FIAPyP3DNksZOD1Y=
Subject key identifier: 10:19:16:5A:77:31:82:BB:5C:47:4E:11:05:6E:71:44:08:6A:07:F6
Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial: 0194228E2305DA140A283C09D9A237B522F8
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/EBkWWncxgrtcR04RBW5xRAhqB_Y.roa
Signing time: Wed 01 Jan 2025 15:48:47 +0000
ROA not before: Wed 01 Jan 2025 15:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25530
IP address blocks: 62.113.32.0/23 maxlen: 24
62.113.33.0/24 maxlen: 24
62.113.34.0/23 maxlen: 23
62.113.38.0/24 maxlen: 24
62.113.40.0/24 maxlen: 24
62.113.45.0/24 maxlen: 24
62.113.46.0/24 maxlen: 24
62.113.47.0/24 maxlen: 24
62.113.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:23:05:da:14:0a:28:3c:09:d9:a2:37:b5:22:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Validity
Not Before: Jan 1 15:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1019165a773182bb5c474e11056e7144086a07f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:e4:fe:4b:16:82:c0:a8:83:a0:b3:63:25:
19:a8:2d:09:ce:e2:9a:23:de:9e:f4:e2:ce:56:2b:
9c:06:e9:91:f0:68:e3:36:43:85:68:b4:94:ef:2a:
99:64:32:69:6a:d3:86:e3:27:98:2a:fd:e1:a9:e3:
52:56:9b:89:e0:af:24:80:9c:d9:e5:19:40:64:19:
f3:b0:3d:26:19:f8:11:43:c0:66:25:e8:74:03:5a:
19:c4:e0:7e:a0:06:96:90:f7:32:96:e6:1a:02:56:
36:72:10:9a:85:55:f8:44:26:68:b1:6f:08:a8:2f:
26:ef:cb:30:60:c7:cb:fc:e9:af:c5:86:be:9b:17:
c9:8e:4e:fd:48:8b:5b:75:29:60:9b:a6:4f:bd:17:
d4:67:1b:f1:42:13:25:6d:a0:aa:e2:e7:fe:91:67:
52:92:5a:a5:76:30:b1:84:bf:21:88:ac:da:dd:33:
69:90:fe:7e:bf:35:b0:84:bd:5c:d9:e4:ae:bd:c1:
3b:3f:d4:5f:d1:20:ce:ea:10:00:38:00:e5:96:88:
fc:1b:a3:88:9c:35:57:17:5b:46:44:9d:72:d5:84:
74:1f:b4:b5:06:5e:ce:56:ac:a6:44:e0:e0:04:bd:
c0:ef:cf:61:3f:9e:85:f7:f2:7a:52:e4:36:37:52:
ce:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:19:16:5A:77:31:82:BB:5C:47:4E:11:05:6E:71:44:08:6A:07:F6
X509v3 Authority Key Identifier:
keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/EBkWWncxgrtcR04RBW5xRAhqB_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.32.0/22
62.113.38.0/24
62.113.40.0/24
62.113.45.0-62.113.55.255
Signature Algorithm: sha256WithRSAEncryption
2a:30:a9:3a:ab:36:74:d6:9d:ba:1f:35:eb:bf:5d:d7:1b:78:
88:b1:72:e4:7a:d1:26:a0:e3:9c:e4:bf:3e:1e:60:70:5a:49:
38:3f:4a:f3:0e:f5:b8:1c:ae:83:0e:b7:45:0a:d5:67:46:ad:
d5:e4:ac:e7:33:71:dd:09:69:0c:2d:65:f4:56:7d:1a:e0:cb:
13:43:c6:04:84:05:85:f0:bf:b7:76:6f:1e:90:55:8c:86:0c:
6d:a0:1b:cb:4d:45:79:29:3f:81:a3:c3:d8:46:27:53:cd:75:
05:1f:a9:e4:b2:b8:2a:e4:a5:02:94:75:24:15:aa:a9:d7:4e:
37:7d:bd:88:5d:33:7e:e8:45:a1:d5:b3:02:c5:16:b1:95:3d:
44:86:cf:a0:53:d5:0f:2e:3f:a6:b2:29:f9:79:36:ab:16:b4:
a1:23:10:73:b4:7d:94:9c:03:74:35:ce:b2:c9:55:d0:49:e0:
8a:2b:94:54:91:fd:17:5d:e7:6c:eb:fd:a8:63:2b:fa:77:1e:
39:39:50:f4:24:44:7c:6b:5b:32:34:d5:47:2c:f9:0e:23:0d:
36:e7:c4:53:b0:d9:73:4e:81:d1:70:4a:73:3d:23:4b:db:cc:
94:0a:80:59:a2:16:e8:21:6e:cb:c1:8f:0d:7c:ca:0b:27:8d:
c1:61:4e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:15:50 2025 by rpki-client